CVE-2021-27561

Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

Description

Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.

Severity: CRITICAL

CVSS Score: 9.8

Vendor: Yealink

Product: Device Management